path: root/security/integrity
diff options
authorJiri Benc <jbenc@redhat.com>2015-08-28 20:48:21 +0200
committerDavid S. Miller <davem@davemloft.net>2015-08-29 13:07:54 -0700
commitb9b6695cf0e1afebc207e28c7e9350c90547a426 (patch)
tree206cb09c12678bc8afeda31b02927bc1edb30124 /security/integrity
parentip_tunnels: record IP version in tunnel info (diff)
fou: reject IPv6 config
fou does not really support IPv6 encapsulation. After an UDP socket is created in fou_create, the encap_rcv callback is set either to fou_udp_recv or to gue_udp_recv. Both of those unconditionally assume that the received packet has an IPv4 header and access the data at network_header as it was an IPv4 header. This leads to IPv6 flow label being interpreted as IP packet length, etc. Disallow fou tunnel to be configured as IPv6 until real IPv6 support is added to fou. CC: Tom Herbert <tom@herbertland.com> Signed-off-by: Jiri Benc <jbenc@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'security/integrity')
0 files changed, 0 insertions, 0 deletions